•Identify ethical, security, and privacy considerations in conducting data and information analysis and selecting and using information technology.
The IT department for Anne Arundel County requires strong passwords for users to access and use information systems.
•The IT department for Anne Arundel County is meticulous about keeping payment terminal software, operating systems and other software (including anti-virus software) updated.
•Assessment of protection from remote access and breaches to the Anne Arundel network:Odenton Township accesses the database system for the County when updating resident’s accounts for services.It is not clear whether a secure remote connection (VPN) is standard policy.
•Assessment of physical security at the Odenton Township hall: the only current form of physical security arelocks on the two outer doors;however,the facility is unlocked
•Employee awareness training on data security and secure practices for handling sensitive data
•The overarching conclusion of the risk assessment was that Odenton Township is not fully compliant with the PCI Data Security Standards(v3.2)
